$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/I2ESjtxEvpSySeO1Calp5xAaE2g.roa File: I2ESjtxEvpSySeO1Calp5xAaE2g.roa (raw, json) Hash identifier: 1z3QGBeEux7o6sPAo6ToNzntUuRxNqPXhZ+GpdARnM0= Subject key identifier: 23:61:12:8E:DC:44:BE:94:B2:49:E3:B5:09:A9:69:E7:10:1A:13:68 Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Certificate serial: 8C Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/I2ESjtxEvpSySeO1Calp5xAaE2g.roa Signing time: Fri 01 Aug 2025 01:33:38 +0000 ROA not before: Fri 01 Aug 2025 01:33:38 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 7684 IP address blocks: 133.125.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Validity Not Before: Aug 1 01:33:38 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=2361128EDC44BE94B249E3B509A969E7101A1368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:26:e0:65:bf:e1:59:17:d5:d6:bf:ea:89:45: 4e:5d:23:55:0e:65:b7:fa:ed:e9:77:1f:98:1e:2a: ed:6b:ae:de:49:d4:0a:b6:d2:e2:63:5b:3f:ab:57: 2a:96:aa:fd:7e:4e:07:42:1d:4d:8d:f4:07:65:e8: 71:fc:11:22:5b:ab:65:24:e3:75:62:45:b6:26:61: 88:38:49:b9:18:66:18:bd:0a:84:ad:b6:f7:b8:fd: b0:df:b3:ad:5d:e8:ad:38:c4:ff:22:fb:f7:b0:c7: 95:38:c9:6f:44:dd:47:54:6b:6a:9d:97:af:59:91: 93:e3:ac:bf:37:a6:45:7e:81:b1:28:d3:23:6a:de: 3e:f5:b1:53:06:71:36:77:90:d1:11:95:32:b3:00: ad:65:e5:0e:4f:60:48:bf:46:c9:e6:10:46:24:1a: 65:d8:c1:93:a2:57:46:26:bc:8f:3f:0b:a1:53:94: d5:b6:85:70:e9:7f:34:f7:ed:94:df:3c:49:c2:f1: 2e:6a:3d:8a:ea:48:eb:95:e1:45:78:56:7a:6c:65: 47:f3:55:8e:49:b7:32:54:ff:00:6b:51:19:91:7b: e5:fc:b7:b8:0b:9e:45:02:3c:33:f4:42:c5:a8:f8: eb:bb:91:6b:27:b3:d4:e3:86:08:ca:1d:ef:9f:cc: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:61:12:8E:DC:44:BE:94:B2:49:E3:B5:09:A9:69:E7:10:1A:13:68 X509v3 Authority Key Identifier: keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/I2ESjtxEvpSySeO1Calp5xAaE2g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.125.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:7d:bc:68:b4:7f:e2:16:9e:b7:ed:c9:4b:09:e0:16:a2:0d: 5c:98:9f:57:7b:9c:9b:6b:af:6f:cf:a5:13:40:20:28:18:ef: cd:f3:4a:03:fc:08:93:f3:a6:9d:59:3e:d6:66:d2:99:57:8f: e9:6f:7e:75:94:e0:12:20:fb:20:99:2f:ce:1c:59:b4:6b:78: 37:ce:79:5f:fd:81:86:55:55:18:d2:bd:d7:da:f6:39:ec:89: 52:3d:33:0f:b5:f8:51:aa:f8:cc:ee:4f:21:4b:51:fd:01:16: 84:ab:56:39:0b:f8:04:12:82:a9:fc:d2:aa:24:d5:a7:c7:55: 34:3e:b5:69:41:76:f4:d7:fd:2f:dd:73:61:e3:6d:1d:27:93: 97:fe:aa:42:6b:a4:da:df:a5:b3:c3:ca:f6:92:3e:47:23:3b: 96:3a:bd:43:f1:7b:e8:9a:a3:53:f3:cb:96:a4:6d:24:c1:97: df:61:f7:ef:cd:42:05:19:b5:5d:82:b4:9d:1b:b8:b5:41:8d: d9:4e:1f:25:ef:db:81:2b:8d:f4:0a:7e:5e:22:ea:c5:92:22: 01:fe:2b:e5:e7:a0:8a:7f:04:e8:86:f2:99:4a:6d:a0:02:9b: 04:ae:18:c6:82:0b:8f:fb:d9:c4:46:97:9e:b4:31:35:f8:b9: 98:51:9c:9e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD MTU2NDlBODI1N0Y2NEZDOTQyMTY3RTMxMEFEMzhBRDAyQ0RCQzAeFw0yNTA4MDEw MTMzMzhaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDIzNjExMjhFREM0NEJF OTRCMjQ5RTNCNTA5QTk2OUU3MTAxQTEzNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4JuBlv+FZF9XWv+qJRU5dI1UOZbf67el3H5geKu1rrt5J1Aq2 0uJjWz+rVyqWqv1+TgdCHU2N9Adl6HH8ESJbq2Uk43ViRbYmYYg4SbkYZhi9CoSt tve4/bDfs61d6K04xP8i+/ewx5U4yW9E3UdUa2qdl69ZkZPjrL83pkV+gbEo0yNq 3j71sVMGcTZ3kNERlTKzAK1l5Q5PYEi/RsnmEEYkGmXYwZOiV0YmvI8/C6FTlNW2 hXDpfzT37ZTfPEnC8S5qPYrqSOuV4UV4VnpsZUfzVY5JtzJU/wBrURmRe+X8t7gL nkUCPDP0QsWo+Ou7kWsns9TjhgjKHe+fzE43AgMBAAGjggInMIICIzAdBgNVHQ4E FgQUI2ESjtxEvpSySeO1Calp5xAaE2gwHwYDVR0jBBgwFoAU78FWSaglf2T8lCFn 4xCtOK0CzbwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzExMjQ3Lzc4RldTYWdsZjJUOGxDRm40eEN0T0swQ3pidy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzc4RldTYWdsZjJUOGxDRm40eEN0 T0swQ3pidy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMTI0Ny9JMkVTanR4RXZwU3lTZU8xQ2FscDV4QWFFMmcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAhX0wDQYJKoZIhvcNAQELBQADggEBAKp9vGi0f+IWnrftyUsJ4Bai DVyYn1d7nJtrr2/PpRNAICgY783zSgP8CJPzpp1ZPtZm0plXj+lvfnWU4BIg+yCZ L84cWbRreDfOeV/9gYZVVRjSvdfa9jnsiVI9Mw+1+FGq+MzuTyFLUf0BFoSrVjkL +AQSgqn80qok1afHVTQ+tWlBdvTX/S/dc2HjbR0nk5f+qkJrpNrfpbPDyvaSPkcj O5Y6vUPxe+iao1Pzy5akbSTBl99h9+/NQgUZtV2CtJ0buLVBjdlOHyXv24ErjfQK fl4i6sWSIgH+K+XnoIp/BOiG8plKbaACmwSuGMaCC4/72cRGl560MTX4uZhRnJ4= -----END CERTIFICATE-----Generated at Mon Aug 11 13:17:50 2025 by rpki-client